Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/323830343a363066633a3a2f33322d3332203d3e20323639323034.roa
File:                     323830343a363066633a3a2f33322d3332203d3e20323639323034.roa (raw, json)
Hash identifier:          7QeoRBrDQ78M0ZVJBZmns7jETlLxUMnHvI+ZCpD1jYg=
Subject key identifier:   8B:A9:AE:87:7D:13:87:1A:BD:A8:EC:D4:81:85:A7:31:39:72:89:E2
Certificate issuer:       /CN=F8BE8E8099EB9AD83487E36532BAD57E3162EE73
Certificate serial:       30305663608A65223DF285875E541DFDBA087C4B
Authority key identifier: F8:BE:8E:80:99:EB:9A:D8:34:87:E3:65:32:BA:D5:7E:31:62:EE:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8BE8E8099EB9AD83487E36532BAD57E3162EE73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/323830343a363066633a3a2f33322d3332203d3e20323639323034.roa
Signing time:             Mon 09 Dec 2024 12:26:33 +0000
ROA not before:           Mon 09 Dec 2024 12:21:33 +0000
ROA not after:            Mon 08 Dec 2025 12:26:33 +0000
asID:                     269204
IP address blocks:        2804:60fc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:30:56:63:60:8a:65:22:3d:f2:85:87:5e:54:1d:fd:ba:08:7c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8BE8E8099EB9AD83487E36532BAD57E3162EE73
        Validity
            Not Before: Dec  9 12:21:33 2024 GMT
            Not After : Dec  8 12:26:33 2025 GMT
        Subject: CN=8BA9AE877D13871ABDA8ECD48185A731397289E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:4c:78:d1:8a:b7:14:42:dc:db:da:7d:8a:
                    db:e7:e7:24:75:9c:fb:68:7a:a4:03:4c:19:07:75:
                    0b:37:07:0b:71:39:b9:50:72:d7:27:6a:5e:ee:11:
                    24:ed:af:50:d0:19:2d:51:a3:84:9a:a7:47:d7:7f:
                    6c:00:52:7c:42:8a:c0:43:8e:eb:d9:a8:98:81:8c:
                    25:8b:57:37:02:e2:89:43:3b:89:89:01:7a:67:ce:
                    04:50:bb:c4:03:e0:df:ce:95:28:64:0a:d7:ec:c3:
                    18:2d:2c:09:7c:e2:42:13:de:27:71:76:b5:3c:21:
                    2f:6d:3b:64:c9:ff:ca:59:98:61:3f:c8:a1:4f:44:
                    c9:35:bc:3b:ff:f3:d9:07:f6:92:0d:cf:30:13:69:
                    9d:90:6f:5a:b8:05:b3:62:b3:00:e0:19:11:ba:c4:
                    c5:0b:1b:b7:72:c5:86:c3:c4:d4:80:6e:66:22:61:
                    8e:1f:08:62:b8:e6:38:7c:cb:ff:9f:c1:4b:0c:05:
                    92:4e:22:6c:29:4d:8d:22:53:98:12:13:57:5a:03:
                    83:b1:d2:40:52:24:90:2e:f9:f0:57:09:dc:43:f9:
                    ef:8c:3d:2b:7c:23:e2:8a:f1:c4:e6:f1:53:70:7e:
                    e6:4c:2f:a6:71:25:91:b0:48:9d:44:03:fe:61:62:
                    7d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A9:AE:87:7D:13:87:1A:BD:A8:EC:D4:81:85:A7:31:39:72:89:E2
            X509v3 Authority Key Identifier:
                keyid:F8:BE:8E:80:99:EB:9A:D8:34:87:E3:65:32:BA:D5:7E:31:62:EE:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/F8BE8E8099EB9AD83487E36532BAD57E3162EE73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8BE8E8099EB9AD83487E36532BAD57E3162EE73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/323830343a363066633a3a2f33322d3332203d3e20323639323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:75:15:1a:20:8a:4c:5f:7e:98:b9:5a:c7:54:4a:ce:47:4f:
         be:7d:62:b1:dd:23:1a:c0:bd:ce:10:4d:52:1d:5d:fe:30:dd:
         9b:d0:73:34:85:b6:b7:f3:15:3b:d5:35:b5:9b:d0:d6:c9:18:
         ac:38:4d:10:2a:3c:16:aa:5a:cd:61:d5:d1:87:2f:a0:8c:55:
         11:da:b3:f9:b0:cf:fa:4f:82:ff:98:81:aa:f7:f7:12:e0:8c:
         1d:e1:0b:2e:c2:95:61:f8:6e:25:3d:a8:86:23:25:d8:9a:ad:
         77:87:f9:4d:78:7d:dd:a4:f7:f3:17:dc:0f:6a:b2:98:fa:81:
         34:9e:01:21:6b:ad:97:47:4c:d3:18:91:cb:9d:cb:50:a0:3b:
         13:f4:07:de:81:d2:e6:40:bf:5b:ea:7d:19:ae:a7:55:5d:ac:
         9a:53:77:e3:06:91:f4:85:d0:b0:a7:e0:ef:31:2a:49:20:e6:
         b6:e4:84:af:bb:c5:77:a9:b2:26:c9:76:79:fe:7e:6e:12:86:
         f4:1c:5b:7c:a1:03:bf:fa:bf:78:b8:5a:bc:a6:41:56:2c:a9:
         7b:ee:14:cf:6e:38:90:be:45:be:93:a7:a6:91:51:e6:62:e3:
         77:68:eb:56:2d:d6:63:5f:06:88:dc:37:df:aa:dd:41:f0:77:
         68:c2:03:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:52 2025 by rpki-client